Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
File:                     60cb61fc-8048-3d70-a4c8-ddf43df58222.roa (raw, json)
Hash identifier:          9T3e7OIo1lXtOSjovrJVvfMrHiu2Lide970xTEf787o=
Subject key identifier:   D9:91:C4:BE:FD:69:9E:43:6D:BF:F9:8E:28:4B:36:A3:67:B8:37:55
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584D7CCFD67DA21CC09A8EE051A0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     3423
IP address blocks:        2602:fbdc:88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d6:7d:a2:1c:c0:9a:8e:e0:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=a213f9f4-c022-4f66-ace2-26bd885f8d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:9a:8c:2b:6d:bc:d0:c1:72:70:b2:6e:28:
                    c5:4c:d2:85:cc:65:ef:0b:08:bd:ae:63:fc:0a:f1:
                    3c:18:6b:a6:ae:4d:f9:15:f4:6b:88:97:b4:e8:f6:
                    97:7f:b1:12:e6:2e:55:c4:36:61:9d:40:f6:29:74:
                    f5:5c:6e:f4:59:b0:2b:65:ac:a5:ba:ac:76:92:db:
                    50:f8:c7:ef:c9:15:04:36:76:36:23:56:ca:85:23:
                    be:7b:09:21:98:0e:84:65:c9:82:b3:fb:12:97:70:
                    e0:14:c5:13:c3:c0:0a:c5:be:49:f5:a8:98:78:2f:
                    10:fb:9e:78:51:d4:a4:d5:b6:3d:ba:c0:84:08:71:
                    e6:b6:9a:d7:b3:c1:35:c0:99:46:6f:51:55:9b:6d:
                    80:f5:e6:cc:6a:63:9a:b2:3c:8d:42:d1:12:2e:60:
                    09:28:13:40:5e:c8:39:80:64:62:b9:4e:0e:80:b2:
                    23:50:d8:02:58:a1:45:33:39:82:21:ec:b2:17:28:
                    5c:e6:e1:27:b2:3f:10:db:eb:0c:32:b7:92:0a:bc:
                    eb:3d:af:6d:84:c4:fa:34:50:9e:d5:26:a9:52:5e:
                    98:8c:7c:32:07:bf:94:94:97:22:a8:1f:37:dc:76:
                    ca:ad:ff:98:df:ce:1b:a8:99:d0:03:e1:b9:8e:e3:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:C4:BE:FD:69:9E:43:6D:BF:F9:8E:28:4B:36:A3:67:B8:37:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/60cb61fc-8048-3d70-a4c8-ddf43df58222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:51:bb:1b:83:5b:f3:28:c6:ac:32:5e:da:90:44:0c:ee:30:
         b5:20:09:2c:76:16:30:80:a3:de:ef:12:10:ae:34:9e:99:46:
         40:91:fe:1d:73:47:5f:9d:47:ba:cd:87:67:92:b4:87:01:1c:
         5a:9e:a1:9e:5f:41:fc:ec:00:bb:0a:ce:79:a0:3c:d2:c8:2a:
         e0:f5:d9:76:89:ae:4c:31:1a:55:6e:a6:95:fe:92:70:aa:b6:
         9f:c3:b7:75:5a:23:2d:ce:6d:e1:39:04:34:bf:91:84:13:fb:
         f0:a2:0c:b7:34:38:f6:76:e0:81:33:8d:40:7b:7f:13:13:b9:
         aa:92:50:96:e8:82:e5:6f:3f:b8:5f:5b:e9:3d:79:de:65:49:
         6d:d4:c5:b1:9e:4f:f6:22:23:e1:38:c8:82:b4:bc:1c:58:6e:
         d0:99:52:1b:a3:6d:da:a3:b5:88:58:c7:b6:13:1a:c2:23:cf:
         93:c6:e5:21:97:1a:29:a0:30:36:44:02:26:d1:8a:73:5f:41:
         70:02:08:96:7d:ac:68:34:35:21:78:54:e3:f7:e7:3b:1a:b6:
         c4:4c:49:9e:a9:e4:10:d1:b3:c8:d5:e9:8b:71:1a:c6:35:36:
         fe:b0:62:72:78:0b:b4:77:43:5b:88:c8:d8:04:08:ac:b9:9b:
         c3:05:44:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE18z9Z9ohzAmo7gUaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
YTIxM2Y5ZjQtYzAyMi00ZjY2LWFjZTItMjZiZDg4NWY4ZDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/uajCttvNDBcnCybijFTNKFzGXvCwi9rmP8
CvE8GGumrk35FfRriJe06PaXf7ES5i5VxDZhnUD2KXT1XG70WbArZayluqx2kttQ
+MfvyRUENnY2I1bKhSO+ewkhmA6EZcmCs/sSl3DgFMUTw8AKxb5J9aiYeC8Q+554
UdSk1bY9usCECHHmtprXs8E1wJlGb1FVm22A9ebMamOasjyNQtESLmAJKBNAXsg5
gGRiuU4OgLIjUNgCWKFFMzmCIeyyFyhc5uEnsj8Q2+sMMreSCrzrPa9thMT6NFCe
1SapUl6YjHwyB7+UlJciqB833HbKrf+Y384bqJnQA+G5juOXnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNmRxL79aZ5Dbb/5jihLNqNnuDdVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNjBjYjYxZmMtODA0OC0z
ZDcwLWE0YzgtZGRmNDNkZjU4MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABVRuxuDW/MoxqwyXtqQRAzuMLUgCSx2FjCAo97vEhCuNJ6ZRkCR
/h1zR1+dR7rNh2eStIcBHFqeoZ5fQfzsALsKznmgPNLIKuD12XaJrkwxGlVuppX+
knCqtp/Dt3VaIy3ObeE5BDS/kYQT+/CiDLc0OPZ24IEzjUB7fxMTuaqSUJboguVv
P7hfW+k9ed5lSW3UxbGeT/YiI+E4yIK0vBxYbtCZUhujbdqjtYhYx7YTGsIjz5PG
5SGXGimgMDZEAibRinNfQXACCJZ9rGg0NSF4VOP35zsatsRMSZ6p5BDRs8jV6Ytx
GsY1Nv6wYnJ4C7R3Q1uIyNgECKy5m8MFRI0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:13 2026 by rpki-client